jagracey

Joined 13 years ago

Karma
93
Submissions
21
Member since
Sep 12
JS Dev CEO @ https://getwisdom.io
View on Hacker News

Recent submissions

Comment · 7 years ago
Comment · 7 years ago
Comment · 7 years ago
211 of the top 500 domains (https://moz.com/top500) contain the letter 'i' within them. It may be worth checking out if they are also susceptible to the Turkish dotless 'i' problem.
Comment · 7 years ago
I agree. I'll be releasing an article about this tomorrow. There are in-fact many security ramifications that have not been solved in practice.
Comment · 7 years ago
Comment · 7 years ago
Thanks for catching. It's a fairly complex subject matter- and particularly hard get extra eye balls willing to check for typos.

- String length is typically measured in code units. - Funny enough, with Unicode normalization, multiple diacritics can be reduced into a single code point.

Comment · 7 years ago
For exploration, additionally I'd recommend http://shapecatcher.com/ It allows you to draw the shape you are looking for, and with some form of ML, sorts by similarity. It has come in handy a few times for finding the characters I'm unable to describe.
Comment · 7 years ago
Just a quick and scrappy "Ghost" blog running on a $5 Digital Ocean droplet with the usual analytics.
Comment · 7 years ago
The Emoji emoji modifiers are pretty cool. - Skin color modifiers - Character combiners: - man [ZWJ] woman [ZWJ] boy [ZWJ] girl === family of 4
Comment · 7 years ago
Unicode reverse character:

'hello \u{202e} world'; 'hello dlrow' // Visual equivalent

Comment · 7 years ago
I got one about bypassing GitHub's authentication using Unicode on the company blog: https://blog.getwisdom.io/hacking-github/

I've wanted to write a deep dive on JS defense for a while now. Lots of cool stuff learned I'd love to share- maybe in the next few weeks.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton